Security MCP servers

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Signing requests, 18+ age checks with EUDI wallets, meetings, cards. People sign in CodeB Wallet.

Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.

Screen crypto wallets vs OFAC SDN + threat intel; pre-payment checks, signed receipts; SAR drafts

Takes the people out of text before a model sees it, and puts them back in the reply.

MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.

XFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only.

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

Paid remote MCP for server-card validation, auth checks, trust packets, and readiness.

Paid remote MCP for LLM security scans, jailbreak checks, analytics, checkout, and readiness.

Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: [email protected]

Access Clerk authentication docs, SDK snippets, and quickstart guides

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

Attestari's verdict on an npm or PyPI package version, asked before an agent installs it.

Image risk, EXIF/IPTC/XMP, reverse-image backlinks, content, watermark, OCR via PicDefense.io.

Manage Koru Shield DNS filtering: profiles, rules, categories, schedules, and logs.

Control plane for agent auth walls. Connector 0 handles SMS OTP with US test numbers.

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

Ask your security cameras anything and set up alert rules in a sentence. Built into Agent DVR.

Identity and authorization in one system: allow, deny, the reason, and a record.

PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level

KYC verification on autopilot for Bybit, MEXC and Bitget. 150 countries, pay per result.

Verify photos are real camera captures, not AI: C2PA and RAW+JPEG forensics. OAuth or API key.

Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS

Fallax is a phishing simulation and security awareness training platform. Read your results.

List, schedule, and retrieve evidence for ControlDrill incident-response tabletop exercises.